Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F52BDB2AB1C011F1965E64C6CE1D38B0.roa
File:                     F52BDB2AB1C011F1965E64C6CE1D38B0.roa (raw, json)
Hash identifier:          Ull3v1o1H1gqxQcQkJaQZy6VM8kbtx/f/sFbiTjlJoc=
Subject key identifier:   36:01:63:19:28:4A:D7:E8:E3:60:55:C7:38:C5:DC:77:FC:40:01:42
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DC4
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F52BDB2AB1C011F1965E64C6CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:22:53 +0000
ROA not before:           Wed 16 Sep 2026 11:22:49 +0000
ROA not after:            Wed 31 Dec 2036 11:22:49 +0000
asID:                     219100
IP address blocks:        165.49.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3524 (0xdc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:22:49 2026 GMT
            Not After : Dec 31 11:22:49 2036 GMT
        Subject: CN=6aaa7c0d-03bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:e4:2d:7f:8e:db:50:34:c2:06:79:d4:cc:
                    e6:7b:c8:b2:2a:95:81:6e:05:11:4e:3b:30:bf:3a:
                    43:59:fd:c0:c1:60:6d:64:a1:77:52:dd:75:e2:7e:
                    10:ef:f9:db:8c:f8:bf:b6:3b:11:c8:6e:9d:aa:39:
                    0f:c2:28:fb:d2:c1:0a:2b:e9:d0:a7:bb:cf:b0:22:
                    8b:7e:57:92:42:42:81:90:f9:59:3b:01:7e:59:bd:
                    5d:bb:a2:bf:be:63:08:2e:8e:f7:aa:25:7d:f1:5d:
                    b0:e2:11:25:55:d6:21:59:ee:c4:f6:c9:78:30:18:
                    b2:6a:c5:ea:45:69:59:3b:30:dd:56:b2:2b:e8:c2:
                    a0:ae:2d:db:19:83:07:1c:01:35:37:48:a3:2e:95:
                    8f:74:1f:5e:eb:87:21:44:39:90:1c:4c:28:45:fd:
                    8e:e3:47:5d:80:7c:10:51:4e:4a:a2:69:2e:88:22:
                    c1:56:4f:36:c9:04:9b:cb:4b:b5:32:96:7a:24:a5:
                    b6:b6:e1:89:f7:d5:ee:75:d6:6f:ca:86:7e:3f:70:
                    bf:a9:7a:84:70:8d:ca:96:f3:c4:f2:06:72:25:25:
                    82:19:86:e5:c9:c1:72:3d:3b:e9:1d:70:5b:ba:dc:
                    ae:7d:54:e7:45:70:06:6c:60:a0:ca:ea:1a:ab:9d:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:63:19:28:4A:D7:E8:E3:60:55:C7:38:C5:DC:77:FC:40:01:42
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F52BDB2AB1C011F1965E64C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4a:72:97:b6:22:af:94:f7:81:ff:d3:24:71:e7:a3:b4:7d:
         b6:40:3c:29:54:1d:17:bf:2a:da:4f:15:20:9f:55:ef:0d:1c:
         b5:9c:1b:e0:ee:88:e5:a1:60:7b:94:7e:29:60:d2:bf:c2:64:
         c2:93:be:3a:c0:8d:0b:12:98:94:d1:60:b3:7a:67:52:2f:59:
         84:b2:f8:38:5b:a0:a0:51:00:b7:c1:aa:03:a2:9b:3b:e5:f7:
         18:f6:e0:24:64:50:67:ec:a1:2a:d0:38:1f:c4:b2:f5:a4:9e:
         c6:2d:41:31:43:ff:81:72:83:d9:ca:b0:75:ca:77:85:57:3a:
         1b:09:73:90:92:96:bc:7c:9e:14:e9:1e:bc:70:a6:54:9c:91:
         14:93:2c:8e:23:b5:a2:f1:98:90:0d:6a:ec:ba:bb:fe:08:95:
         b6:20:13:47:cf:0e:86:d2:c2:d6:93:d2:59:01:fa:9d:9e:3e:
         c1:f0:ad:0f:0d:7e:a6:09:8d:6a:b5:ae:13:1f:82:3f:39:14:
         26:03:ea:50:c6:68:84:80:2d:80:2c:4f:f1:93:24:d5:fc:b9:
         9d:1b:3a:53:1b:9d:db:70:51:59:61:78:e2:cb:04:29:ae:88:
         e7:fb:7e:6b:e0:c4:8a:56:43:9e:7f:92:da:02:54:ba:75:d3:
         3b:6a:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----